crashes with SIGSEGV

[Ralf Hildebrandt]

Binary package hint: php5

php5-cgi run from apache2 via fcgi crashes sporadically.
I can reproduce it in the upgrade process for gallery2.

I created this backtrace:

Apr 11 12:43:47 fatush php5-cgi: GNU gdb (GDB) 7.1-ubuntu
Apr 11 12:43:47 fatush php5-cgi: Copyright (C) 2010 Free Software Foundation, Inc.
Apr 11 12:43:47 fatush php5-cgi: License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
Apr 11 12:43:47 fatush php5-cgi: This is free software: you are free to change and redistribute it.
Apr 11 12:43:47 fatush php5-cgi: There is NO WARRANTY, to the extent permitted by law. Type "show copying"
Apr 11 12:43:47 fatush php5-cgi: and "show warranty" for details.
Apr 11 12:43:47 fatush php5-cgi: This GDB was configured as "x86_64-linux-gnu".
Apr 11 12:43:47 fatush php5-cgi: For bug reporting instructions, please see:
Apr 11 12:43:47 fatush php5-cgi: <http://www.gnu.org/software/gdb/bugs/>...
Apr 11 12:43:47 fatush php5-cgi: Reading symbols from /usr/bin/php5-cgi...Reading symbols from /usr/lib/debug/usr/bin/php5-cgi...done.
Apr 11 12:43:47 fatush php5-cgi: done.
Apr 11 12:43:47 fatush php5-cgi: [Thread debugging using libthread_db enabled]
Apr 11 12:43:48 fatush php5-cgi: [New Thread 0x7ffff1f57710 (LWP 26903)]
Apr 11 12:43:48 fatush php5-cgi: [Thread 0x7ffff1f57710 (LWP 26903) exited]
Apr 11 12:43:48 fatush php5-cgi:
Apr 11 12:43:48 fatush php5-cgi: Program received signal SIGSEGV, Segmentation fault.
Apr 11 12:43:48 fatush php5-cgi: 0x00000000006b2ea9 in gc_zval_possible_root (zv=0x16a2130)
Apr 11 12:43:48 fatush php5-cgi: at /build/buildd/php5-5.3.2/Zend/zend_gc.c:143
Apr 11 12:43:48 fatush php5-cgi: 143#011/build/buildd/php5-5.3.2/Zend/zend_gc.c: No such file or directory.
Apr 11 12:43:48 fatush php5-cgi: #011in /build/buildd/php5-5.3.2/Zend/zend_gc.c
Apr 11 12:43:48 fatush php5-cgi: #0 0x00000000006b2ea9 in gc_zval_possible_root (zv=0x16a2130)
Apr 11 12:43:48 fatush php5-cgi: at /build/buildd/php5-5.3.2/Zend/zend_gc.c:143
Apr 11 12:43:48 fatush php5-cgi: #1 0x00000000007172d2 in ZEND_ASSIGN_REF_SPEC_CV_VAR_HANDLER (
Apr 11 12:43:48 fatush php5-cgi: execute_data=0x7ffff7ed7490)
Apr 11 12:43:48 fatush php5-cgi: at /build/buildd/php5-5.3.2/Zend/zend_vm_execute.h:27355
Apr 11 12:43:48 fatush php5-cgi: #2 0x00000000006bcc70 in execute (op_array=0xfba860)
Apr 11 12:43:48 fatush php5-cgi: at /build/buildd/php5-5.3.2/Zend/zend_vm_execute.h:104
Apr 11 12:43:48 fatush php5-cgi: #3 0x000000000069499d in zend_execute_scripts (type=0,
Apr 11 12:43:48 fatush php5-cgi: retval=0x7fffffffa5d0, file_count=3)
Apr 11 12:43:48 fatush php5-cgi: at /build/buildd/php5-5.3.2/Zend/zend.c:1266
Apr 11 12:43:48 fatush php5-cgi: #4 0x0000000000640608 in php_execute_script (primary_file=0x2f002f)
Apr 11 12:43:48 fatush php5-cgi: at /build/buildd/php5-5.3.2/main/main.c:2288
Apr 11 12:43:48 fatush php5-cgi: #5 0x0000000000722534 in main (argc=32767, argv=0x0)
Apr 11 12:43:48 fatush php5-cgi: at /build/buildd/php5-5.3.2/sapi/cgi/cgi_main.c:2110
Apr 11 12:43:48 fatush php5-cgi: A debugging session is active.
Apr 11 12:43:48 fatush php5-cgi:
Apr 11 12:43:48 fatush php5-cgi: #011Inferior 1 [process 26900] will be killed.
Apr 11 12:43:48 fatush php5-cgi:
Apr 11 12:43:48 fatush php5-cgi: Quit anyway? (y or n) [answered Y; input not from terminal]

I disabled extensions like suhosin and apc first, still it crashes.

ProblemType: Bug
DistroRelease: Ubuntu 10.04
Package: php5-cgi 5.3.2-1ubuntu4
Uname: Linux 2.6.33 x86_64
Architecture: amd64
Date: Sun Apr 11 12:45:12 2010
ProcEnviron:
 PATH=(custom, no user)
 LANG=de_DE.UTF-8
 SHELL=/bin/bash
SourcePackage: php5

[Chuck Short (zulcss)]

Thank you for taking the time to report this bug and helping to make Ubuntu better. Please try to obtain a backtrace following the instructions at http://wiki.ubuntu.com/DebuggingProgramCrash and upload the backtrace (as an attachment) to the bug report. This will greatly help us in tracking down your problem.

[Ralf Hildebrandt (ralf-hildebrandt)]

I installed the dbgsyms package and got this backtrace:

Apr 12 17:15:16 fatush php5-cgi: Reading symbols from /usr/bin/php5-cgi...Reading symbols from /usr/lib/debug/usr/bin/php5-cgi...done.
Apr 12 17:15:16 fatush php5-cgi: done.
Apr 12 17:15:16 fatush php5-cgi: [Thread debugging using libthread_db enabled]
Apr 12 17:15:17 fatush php5-cgi: [New Thread 0x7ffff1f57710 (LWP 20739)]
Apr 12 17:15:17 fatush php5-cgi: [New Thread 0x7ffff1f57710 (LWP 20738)]
Apr 12 17:15:17 fatush php5-cgi: [New Thread 0x7ffff1f57710 (LWP 20741)]
Apr 12 17:15:17 fatush php5-cgi: [New Thread 0x7ffff1f57710 (LWP 20737)]
Apr 12 17:15:17 fatush php5-cgi: [New Thread 0x7ffff1f57710 (LWP 20740)]
Apr 12 17:15:17 fatush php5-cgi: [New Thread 0x7ffff1f57710 (LWP 20742)]
Apr 12 17:16:15 fatush php5-cgi: [Thread 0x7ffff1f57710 (LWP 20739) exited]
Apr 12 17:16:15 fatush php5-cgi:
Apr 12 17:16:15 fatush php5-cgi: Program received signal SIGSEGV, Segmentation fault.
Apr 12 17:16:15 fatush php5-cgi: 0x00000000006b2ea9 in gc_zval_possible_root (zv=0x17228b0)
Apr 12 17:16:15 fatush php5-cgi: at /build/buildd/php5-5.3.2/Zend/zend_gc.c:143
Apr 12 17:16:15 fatush php5-cgi: 143#011/build/buildd/php5-5.3.2/Zend/zend_gc.c: No such file or directory.
Apr 12 17:16:15 fatush php5-cgi: #011in /build/buildd/php5-5.3.2/Zend/zend_gc.c
Apr 12 17:16:15 fatush php5-cgi: #0 0x00000000006b2ea9 in gc_zval_possible_root (zv=0x17228b0)
Apr 12 17:16:15 fatush php5-cgi: at /build/buildd/php5-5.3.2/Zend/zend_gc.c:143
Apr 12 17:16:15 fatush php5-cgi: #1 0x00000000007172d2 in ZEND_ASSIGN_REF_SPEC_CV_VAR_HANDLER (
Apr 12 17:16:15 fatush php5-cgi: execute_data=0x10d38e0)
Apr 12 17:16:15 fatush php5-cgi: at /build/buildd/php5-5.3.2/Zend/zend_vm_execute.h:27355
Apr 12 17:16:15 fatush php5-cgi: #2 0x00000000006bcc70 in execute (op_array=0xfba950)
Apr 12 17:16:15 fatush php5-cgi: at /build/buildd/php5-5.3.2/Zend/zend_vm_execute.h:104
Apr 12 17:16:15 fatush php5-cgi: #3 0x000000000069499d in zend_execute_scripts (type=0,
Apr 12 17:16:15 fatush php5-cgi: retval=0x7fffffffa5d0, file_count=3)
Apr 12 17:16:15 fatush php5-cgi: at /build/buildd/php5-5.3.2/Zend/zend.c:1266
Apr 12 17:16:15 fatush php5-cgi: #4 0x0000000000640608 in php_execute_script (primary_file=0x2f002f)
Apr 12 17:16:15 fatush php5-cgi: at /build/buildd/php5-5.3.2/main/main.c:2288
Apr 12 17:16:15 fatush php5-cgi: #5 0x0000000000722534 in main (argc=32767, argv=0x0)
Apr 12 17:16:15 fatush php5-cgi: at /build/buildd/php5-5.3.2/sapi/cgi/cgi_main.c:2110
Apr 12 17:16:15 fatush php5-cgi: A debugging session is active.
Apr 12 17:16:15 fatush php5-cgi:
Apr 12 17:16:15 fatush php5-cgi: #011Inferior 1 [process 20716] will be killed.
Apr 12 17:16:15 fatush php5-cgi:
Apr 12 17:16:15 fatush php5-cgi: Quit anyway? (y or n) [answered Y; input not from terminal]

[Ralf Hildebrandt (ralf-hildebrandt)]

I created a better backtrace (see attachment)